CVE-2018-5735 - CVE House
Back to Database
Status published High CVE-2018-5735

Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858

Vulnerability Description

The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar backports for the fix for 2017-3137 may also be affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-5735

Credits & Attribution

No credits recorded in the NVD database.

References

More from Debian

View All →
CVE-2025-8454
It was discovered that uscan, a tool to scan/watch upstream...
Unknown 0
CVE-2025-6297
dpkg-deb: Fix cleanup for control member with restricted directories
Unknown 0
CVE-2025-68462
Freedombox before 25.17.1 does not set proper permissions for the...
Low 3.2
CVE-2025-53391
The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package...
Critical 9.3
CVE-2025-47153
Certain build processes for libuv and Node.js for 32-bit systems,...
Medium 6.5

Affected Vendor

Affected Software

BIND9
Vulnerable Versions:
Debian BIND9 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1

Timeline

Official Publish: October 30th, 2019
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.